Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Kali Linux for Forensics
- Overview of Kali Linux and its forensic capabilities.
- Preparing a laptop for forensic use.
- Understanding chain of custody and legal implications.
Disk and File System Forensics
- Acquiring and imaging disk data.
- File system analysis using Autopsy and Sleuth Kit.
- Recovering deleted files and identifying hidden data.
Memory and Process Analysis
- Capturing volatile memory.
- Investigating active processes and malware.
- Performing memory analysis with Volatility.
Network Forensics
- Capturing live network traffic.
- Packet analysis using Wireshark and tcpdump.
- Tracing intrusion activities and lateral movement.
Log and Artifact Analysis
- Examining system and application logs.
- Identifying artifacts indicative of compromise.
- Conducting timeline analysis of incidents.
Incident Investigation Workflow
- Evidence acquisition and verification.
- Applying a step-by-step investigation methodology.
- Documenting findings for stakeholders.
Advanced Tools and Techniques
- Mobile device forensic tools within Kali.
- Analysis of steganography and encryption.
- Automating forensic tasks through scripting.
Summary and Next Steps
Requirements
- Foundational knowledge of the Linux command line.
- Basic familiarity with cybersecurity principles.
- Practical experience in incident response or IT security operations.
Target Audience
- Digital forensic investigators.
- Incident response team members.
- IT security professionals.
